- up to 0.6.3; fixes CVE-2014-0017 and some other